I didn't fully understand your exact requirement. Should the photo's be publicly accessible (as in published by the user) or do you need to be logged in to be able to access the photo?
If public access it isn't allowed, you should move the photo's to a protected folder and you can create a Tapestry component that renders the image-link and -if properly logged in- returns the binary image/Asset directly from the file-system. Here's an example of how to create a component that builds a link to a binary object : http://wiki.apache.org/tapestry/Tapestry5HowToCreatePieChartsInAPage Also keep in mind that synchronizing images on file-systems quickly becomes tedious if your app becomes popular and needs to scale to multiple servers. So maybe storing them in a database/cloud would make your project more future-ready? regards, Onno On Wed, Jun 10, 2009 at 12:06 PM, Angelo Chen <angelochen...@yahoo.com.hk>wrote: > > Hi, > > In a app that I'm going to develop, it requires users to log in before they > can browse job related info, quite a number of those are pictures, those > photos now are stored in folders of the server, the easiest way is, link > that folder to tomcat's context, and program can refer to a particular > photo > with < img> tag, problem is, once the link is obtained, user can refer to > that photo even without log in, any idea how to meet this requirement? One > way I can think of is, program will copy the photo on demand to a temp > folder, but it will slow down the rendering, any idea how to meet this > requirement with tapestry 5? > > Thanks, > -- > View this message in context: > http://www.nabble.com/t5%3A-protecting-data-from-public-access-tp23959208p23959208.html > Sent from the Tapestry - User mailing list archive at Nabble.com. > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org > For additional commands, e-mail: users-h...@tapestry.apache.org > >
